|
248151
|
5.3 |
MEDIUM
Network
|
cmsmadesimple
|
cms_made_simple
|
CMS Made Simple (CMSMS) through 2.2.7 allows physical path leakage via an invalid /index.php?page= value, a crafted URI starting with /index.php?mact=Search, or a direct request to /admin/header.php,…
|
CWE-200
Information Exposure
|
CVE-2018-10082
|
2024-11-21 12:40 |
2018-04-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248152
|
9.8 |
CRITICAL
Network
|
cmsmadesimple
|
cms_made_simple
|
CMS Made Simple (CMSMS) through 2.2.6 contains an admin password reset vulnerability because data values are improperly compared, as demonstrated by a hash beginning with the "0e" substring.
|
CWE-640
Weak Password Recovery Mechanism for Forgotten Password
|
CVE-2018-10081
|
2024-11-21 12:40 |
2018-04-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248153
|
8.6 |
HIGH
Network
|
secutech_project
|
ris-11_firmware ris-22_firmware ris-33_firmware
|
Secutech RiS-11, RiS-22, and RiS-33 devices with firmware V5.07.52_es_FRI01 allow DNS settings changes via a goform/AdvSetDns?GO=wan_dns.asp request in conjunction with a crafted admin cookie.
|
CWE-345
Insufficient Verification of Data Authenticity
|
CVE-2018-10080
|
2024-11-21 12:40 |
2018-04-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248154
|
7.8 |
HIGH
Local
|
convert_forms_project
|
convert_forms
|
The Convert Forms extension before 2.0.4 for Joomla! is vulnerable to Remote Command Execution using CSV Injection that is mishandled when exporting a Leads file.
|
NVD-CWE-noinfo
|
CVE-2018-10063
|
2024-11-21 12:40 |
2018-04-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248155
|
5.5 |
MEDIUM
Local
|
linux
|
linux_kernel
|
The hi3660_stub_clk_probe function in drivers/clk/hisilicon/clk-hi3660-stub.c in the Linux kernel before 4.16 allows local users to cause a denial of service (NULL pointer dereference) by triggering …
|
CWE-476
NULL Pointer Dereference
|
CVE-2018-10074
|
2024-11-21 12:40 |
2018-04-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248156
|
4.8 |
MEDIUM
Network
|
joyplus-cms_project
|
joyplus-cms
|
joyplus-cms 1.6.0 has XSS in manager/admin_vod.php via the keyword parameter.
|
CWE-79
Cross-site Scripting
|
CVE-2018-10073
|
2024-11-21 12:40 |
2018-04-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248157
|
5.5 |
MEDIUM
Local
|
jungo
|
windriver
|
windrvr1260.sys in Jungo DriverWizard WinDriver 12.6.0 allows attackers to cause a denial of service (BSOD) via a 0x953827bf DeviceIoControl call.
|
CWE-20
Improper Input Validation
|
CVE-2018-10072
|
2024-11-21 12:40 |
2018-04-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248158
|
5.5 |
MEDIUM
Local
|
jungo
|
windriver
|
windrvr1260.sys in Jungo DriverWizard WinDriver 12.6.0 allows attackers to cause a denial of service (BSOD) via a 0x953826DB DeviceIoControl call.
|
CWE-20
Improper Input Validation
|
CVE-2018-10071
|
2024-11-21 12:40 |
2018-04-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248159
|
6.1 |
MEDIUM
Network
|
jdownloads
|
jdownloads
|
The jDownloads extension before 3.2.59 for Joomla! has XSS.
|
CWE-79
Cross-site Scripting
|
CVE-2018-10068
|
2024-11-21 12:40 |
2018-04-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248160
|
5.4 |
MEDIUM
Network
|
cacti debian
|
cacti debian_linux
|
Cacti before 1.1.37 has XSS because it makes certain htmlspecialchars calls without the ENT_QUOTES flag (these calls occur when the html_escape function in lib/html.php is not used).
|
CWE-79
Cross-site Scripting
|
CVE-2018-10061
|
2024-11-21 12:40 |
2018-04-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|